Yes, we never fully trust the search index so before anything is displayed to the user there are a number of final checks performed to make sure you're actually allowed to see that content.
Another fun example is that your SSO session might have expired. While you technically have access to view the result, we can't show it until you go through the refresh dance to get another valid token.
The trickiest (and most verbose) parts of the external scanner have to do with heredocs and the various ways to declare literals (strings, symbols, regexes, etc).
Hey thanks! I'm one of the primary developers of this grammar along with @maxbrunsfeld. It was the driving force for supporting an external scanner and while there are still some Ruby edges cases, I'm pretty happy with how it came out. I will say we spent a lot of time on this and I read both the bison Ruby grammar and whitequark's ruby parser (which is excellent) in great detail to understand how to deal with certain parts of the language.
One thing I love about tree-sitter is how both the grammar and the resulting ASTs are so readable. I can come back to this project after months of not contributing and pick up right where I left off.
GitHub Enterprise is the on-premise version of GitHub.com that you can buy to run on your own servers. If you are in the developer program and building a product that integrates with GitHub Enterprise, we will give you free licenses for dev/test purposes.
There are some minor differences for integrating with GitHub Enterprise, but just about all the documentation at http://developer.github.com/ applies to both products. While the GitHub.com API is accessed at api.github.com, the API for a GitHub Enterprise install is accessed at yourdomain.com/api/v3/. Definitely shoot us an email if you've got more questions or run into problems: [email protected].
We currently have no plans to make it harder to use the API if you aren't part of the program. If you are a business that relies on our API, we want to have a better relationship with you because there is a good chance we share a customer base.
Another fun example is that your SSO session might have expired. While you technically have access to view the result, we can't show it until you go through the refresh dance to get another valid token.